Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
80
- Mentions · 7d0
- Mentions · 30d11
- All mentions20
- First seenSep 22, 2026
- Last mentioned12d ago
Timeline
20 articles · newest firstEssay argues cheap AI agents will make cyberattacks routine
It cites an authorized NSA Mythos test, a claimed Cairn campaign, and slower patching times.
28
Attackers hijack 17 exposed Cairn AI pentest panels, deploy Poseidon
NorForge tracks clusters AIA0009 and AIA0010 using open admin access, not a newly disclosed vulnerability.
74
Attackers hijack exposed Cairn panels to plant backdoors and steal API keys
NorForge saw injected tasks on at least 17 panels add SSH keys, run Poseidon, and harvest model API keys.
76
Saudi OpenAI employee charged with bugging a San Francisco conference room
Prosecutors say he plugged a $13.90 SEEED board into a TV USB port, hid it in toilet paper, and queried ChatGPT on how to record.
62
Attackers use AI pen-test tool Cairn against e-commerce sites
NorForge says a Chinese-speaking operator ran over 1,100 projects across dashboards aimed at stealing payments.
74
Autonomous AI agents used to breach more than 1,200 websites
NorForge says exposed Cairn panels tied a Chinese-language cluster to web shells at named firms, with data theft unconfirmed.
78
Attackers used open-source Cairn against over 100 organizations
Norforge found three exposed-panel clusters; Reuters names John Deere and SharkNinja, and about 10% of attempts succeeded.
78
AI-agent campaign breached websites at more than 100 companies
NorForge tracked campaign AIA0001 across 14 dashboards; Deere, SharkNinja and Cummins were named.
78
AI agents tied to breaches of more than 100 company websites
NorForge estimates about $5,000 in tokens for a campaign that tried more than 1,200 sites, mostly online stores.
76
Hacker used Cairn AI agents to break into more than 100 sites
Reuters names John Deere, SharkNinja and Cummins; Deere says no sensitive information was accessed.
74
Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM Privileges
Attackers used AI agents and GodPotato to turn an exposed Tomcat endpoint into Windows SYSTEM access.
68
AI tools help hacker break in for $25 per target
AI-driven campaign compromised 27 of 105 retailers and stole about 600,000 card numbers.
74
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
An operator used three open-source AI agents to compromise at least 27 organizations and steal over 600,000 card records.
86
AI-Powered Campaign Targets Hundreds of Online Retailers
A Chinese-speaking actor used autonomous AI agents to compromise online retailers and steal over 600,000 credit cards.
86
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
An AI-agent campaign stole over 600,000 cards and skimmer-infected at least 119 retail sites.
85
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
68
Cisco Talos Launches CAIRN Tool to Hunt and Track AI-Integrated Malware
Cisco Talos released CAIRN, an open-source toolkit to identify AI-integrated malware by analyzing metadata for 'cognitive artifacts' from LLMs.
65
A New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control
Cisco Talos releases CAIRN to track AI malware and documents CLOSEDQUORUM, an unconfirmed Windows implant steered by LLMs.
66
Researchers uncover malware that uses AI to choose its next move
Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets commercial LLMs vote on its next action.
66
Appears with
- Norforgeorganization · 9
- SharkNinjavictim · 7
- Cumminsvictim · 6
- Hermesproduct · 4
- Gambitorganization · 4
- CLOSEDQUORUMmalware · 4
- Deerevictim · 4
- Cisco Talosorganization · 4
- OpenRouterorganization · 4
- Strixproduct · 4
- DeepSeekai model · 4
- Windowsproduct · 3
- Microsoftvendor · 3
- Geminiai model · 3
- Anthropicvendor · 3
- Qwenai model · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.